1. Security Administration Guide
  2. Creating Additional Authentication Policies and Resource

Creating Additional Authentication Policies and Resource

  1. Open the Oracle Access Management Console.

  2. Select Application Domains from the Access Manager section.

  3. Click Search and select your domain name, and then click Edit.

  4. Select the Authentication Policies tab.

  5. Click Create Authentication Policy button.

  6. Create the following policies with your Authentication Scheme.

    • E1Menu Policy

    • ParameterizedURL Policy

    • ShortcutLauncher Policy

  7. Click the Resources tab to create HTTP Type Resources for these policies.

  8. Create the following policies for the Protected Resource Policy:

    • /

    • /.../*

    • /jde

  9. Create the following resource for the E1Menu Policy:

    /jde/E1Menu.maf

  10. Create the following resource for the Parameterized URL Policy:

    /jde/HostedE1Servlet

  11. Create the following resources for the ShortcutLauncherPolicy:

    • /jde/ShortcutLauncher

    • /jde/servlet/com.jdedwards.runtime.shortcut.ShortcutLauncher

      The output should be similar to the following example:

      This image is described in the surrounding test.

  12. Enter the EnterpriseOne URL to the Success URL field in the Protected Resource Policy.

    This image is described in the surrounding test.

  13. Create another HTTP Type Resource for the logout notification that will not be added to any Authentication or Authorization Policy:

    • /jde/NotificationController.mafService

      Select POST for the Operation of this resource.

      Select Excluded for the Protection Level of this resource.

  14. This step applies only to Oracle Access Management (OAM) for Application Development Framework (ADF) Container.

    This image is described in the surrounding test.

    Create the following policy for Protected Resource Policy:

    • /JDEADFContainer/**

    Create the following policies for the Public Resource Policy:

    • /JDEADFContainer/performHandshake

      This image is described in the surrounding test.

      Only POST operation should be selected for this resource.

    • /JDEADFContainer/faces/logout

      This image is described in the surrounding test.

      Only GET operation should be selected for this resource.

    For information about the configuration settings for JAS, ADF, AIS Cookies and ADF settings using Server Manager, see "Configuring Oracle Access Management (OAM) for ADF Container" in the JD Edwards EnterpriseOne Tools Developer's Guide for EnterpriseOne Application Development Framework (ADF) Applications.